SECURE KUBERNETES LIKE A PRO | HOW DEVSECOPS ENGINEERS SECURE Kubernetes ?

[@samikshasharma3544]

Thanks!

[@AbhishekVeeramalla]

Thanks for supporting the channel 😍

[@kaverichowdary6637]

East are West abhishek anna is best 😊

[@AbhishekVeeramalla]

Haha

[@rohanrustagi7857]

So true anna

[@gouravchhabra6142]

Would like to add few security aspects which I have been using so hope others can also take them into consideration: 1. Applying k8s policies using KYVERNO to restrict security policies in k8s resources. 2. Using Manifest/Helm scanners tools like CHECKOV or DATREE to avoid any misconfigurations or vulnerabilities in them. 3. Using cluster scanners or RBAC Visulizers like KUBESCAPE. 4. Using Docker image signing and attestation tool like COSIGN. 5. Following CIS benchmarks for K8s or Cloud on which k8s hosted. 6. Securing Ingress using TLS. 7. Secrets Encryption using sealed secrets or external secret operator. 8. Using Distroless images for building containers.

[@AbhishekVeeramalla]

1st point is covered in latest video Will do others soon. Thanks for sharing Gourav

[@evansdanso2374]

Abhishek, you're great!!! I have taken full DevOps classes but never understood a lot until I started following you! I came into Devops with a little IT background as a data analyst. Thank a lot!!! Can you do a short video to explain various web applications( Nginx, apache tomcat, etc) and how often DevOps Engineer encounter them..and other applications that DevOps Engineers most often deploy. Please 🙏...

[@AbhishekVeeramalla]

Thanks and noted

[@rohita9689]

Papa you are giving such gifts that i can't even explain.. Thank you ❤

[@AbhishekVeeramalla]

😍

[@VikramSharvansh]

Great efforts abhishek👏👏 Each & every video of u making the devops/Kubernetes learning journey simple & interesting. Thanks once again.

[@AbhishekVeeramalla]

😍

[@anjaliranot897]

you have so muck knowlegde and patience to explain all concept so nicely

[@SivakumarA-lx5dj]

@Abhishek, Thanks a lot for your video on most awaited topic

[@AbhishekVeeramalla]

Welcome

[@princeraghu3807]

Its very quality & valuable content brother😊

[@AbhishekVeeramalla]

😍

[@akhilc8211]

thank you anna my day finishes with your videos......

[@AbhishekVeeramalla]

😍

[@VaibhavSupe]

Hello Abhishek. Thank you so much….really hat’s off you for such an amazing content with easily understandable language & your dedication🤩🤩🤩 If possible please make more such videos on Security / DevSecOps related topics. Thanks a lot 🤩🤩🤩

[@AbhishekVeeramalla]

😍

[@phaneerameswarareddychilum7189]

Abhisek your content is great and the way you teach is really superb. only one correction, I guess the image scan command is docker snyk not docker synk if I am correct. please correct me if I am wrong

[@AbhishekVeeramalla]

U r correct .. sorry for the typo and mispronunciation

[@KhanVit]

Great video! Please I have a quick question: Why do DevOps engineers need to secure etcd and the API server when using EKS, AKS, or GKE? Isn't that the responsibility of the cloud provider?

[@tanayabanerjee2380]

Hi,,, Please make the demo part on Rbac , Network policy and rest of the topics ...it will be very helpful 🙏🙏

[@AbhishekVeeramalla]

Sure

[@nikhilmeshram4376]

beautiful explanation sir....... thank you so much....👌👌👌👌👌

[@AbhishekVeeramalla]

❤️

[@jackayuk424]

The best one best this space thanks a million sir ❤

[@twizzoe]

@Abhishek, thanks for this detailed lecture. I need clarification on securing the API-SERVER. If we are using Amazon EKS, I thought since Amazon handles the control plane where the API-SERVER is located, it handles the security of every component involved. With this video, I am assuming we still need to take an extra step to secure it

[@AbhishekVeeramalla]

Will cover that

[@sonalimohapatra880]

Yeah Abhishek bro is the best ❤❤

[@AbhishekVeeramalla]

😍

[@krishnakumarkumar5710]

Good content for free is dream in this selfish world. But some worriers like Abhishek prove it wrong...

[@AbhishekVeeramalla]

Thanks a lot

[@tarunmeher5464]

Hey Abhishek.. Can you give us a trick or any plan that we can remember all these aws service, kubernetes topic so that it will be easy for the interview,, because there are so many topic on devops and not every one have sharp minded.. so hope you understand and give us a solution for this.. Thank you❤

[@motivation2change754]

snyk and sysdig are the tool to scan images

[@lakshmanababu4279]

Thanks

[@AbhishekVeeramalla]

Thanks for contributing to the channel

[@kundalakshmidevi4449]

very nice explanation abhi sir but i have a doubt here you have mentioned docker scan in github repo but in video you said docker sync . Is it docker scan or docker sync??????

[@AbhishekVeeramalla]

synk is a tool that performs scanning on docker images. docker scan internally uses synk.

[@rohithreddy6853]

Thnx anna If possible please do a video on how to make ATS resume for freshers on AWS with DevOps please anna

[@AbhishekVeeramalla]

Noted

[@ThecookBoy]

Hai Abhishek. Verramalla can we expect this in the practical video it might be helpful for a better understanding

[@AbhishekVeeramalla]

It will be too lengthy .. I will think of something

[@haroon.niamat]

Informative..!!👍

[@AbhishekVeeramalla]

😍

[@pjj7466]

Fantastic session bro.

[@ifirefox1]

Hi Abhishek, thank you so much for content, i am more focussed towards devsecops, should i finish your zero to hero kubernetes coarse before i start this video?

[@AbhishekVeeramalla]

If u don’t have understanding of k8s yes

[@nishanthhg6437]

Thank you for all the contents

[@AbhishekVeeramalla]

Welcome

[@sth5287]

Hi abhishek, i love your content.. Can you please make a series on azure devops ??? Please.... Please...

[@AbhishekVeeramalla]

Noted

[@sth5287]

@@AbhishekVeeramalla thank you abhishek ♥️♥️

[@saswatpriyabrat]

This is an excellent Video with a bundles of Knowledge....Thanks for this awesome Video ❤

[@AbhishekVeeramalla]

😍

[@ashuofficial28]

Ingress graphana prompetus those all use in Aks na not in use those all in eks.

[@AbhishekVeeramalla]

They are used in aws as well

[@ketanmorey1953]

Abhishek bhai❤

[@AbhishekVeeramalla]

Welcome

[@khagolakalyan]

Nice Video...Can you Please explain the link between Google optimize and A/B testing with Kubernetes cluster and One more Keycloak.link.woth oidc..What's the link between these two..I m getting confused..

[@AbhishekVeeramalla]

Ok noted

[@khagolakalyan]

Thanks for your reply@@AbhishekVeeramalla ... Eagerly Waiting for your Video...😍😍

[@kishorkhilare6375]

Sir, Can you explain in hindi also

[@AbhishekVeeramalla]

Many subscribers don’t understand hindi bro

[@kodjoviamedimele3066]

Hi sir. First of all thank you for the quality of your contents. I have an issue when implementing the cicd with Argo. I import the repo and when it comes to the Jenkins file I am lost. Wondering if you can go over how you configure it ?

[@AbhishekVeeramalla]

Please watch the ultimate cicd pipeline viceo

[@kodjoviamedimele3066]

@@AbhishekVeeramalla I was doing it with the video but I didn’t see the part where you went through the Jenkins file configuration. I tried to figure out but with no success. I will try again today.

[@jaganarumugam8527]

Which part you faced issue..

[@yuvichh]

31:00, is it Docker scout or Synk. I mean sync is another project and I can see the Docker Scout!

[@AbhishekVeeramalla]

Snyk

[@ganeshgoudru8444]

Hi Abhishek thanks for the video...one doubt the command is snyk or synk?

[@AbhishekVeeramalla]

snyk , sorry for the typo

[@ganeshgoudru8444]

@@AbhishekVeeramalla thanks Abhishek. Just wanted to clarify 😊

[@shalubajpai4225]

Great videos Abhishek! Can you plz make videos on how to handle volume in kubernetes?

[@AbhishekVeeramalla]

Noted

[@ganeshgoudru8444]

Hi Abhishek, is it possible to make hands on in this video? Bcz usually in EKS we won’t be maintaining control plane right so how to implement security for eks clusters?

[@twizzoe]

I would like to inquire if Vault can be used for encryption of the ETCD

[@AbhishekVeeramalla]

I haven’t explored that much .. sorry

[@senthilkumar5129]

Thank you

[@AbhishekVeeramalla]

Welcome

[@lakshmisucharitha3529]

where is the practical sesion video for all these 7 security steps ? Can any one ping here the link

[@delengr1026]

Thanks

[@AbhishekVeeramalla]

Welcome

[@techairenglish1357]

If I am using AKS, then is the API server is already secured since master node is managed by Azure or it is not required?

[@nishanthhg6437]

First view sir

[@AbhishekVeeramalla]

Thanks alot

[@napoleanbonaparte9225]

Pod container security kuda adutunaaru anna

[@AbhishekVeeramalla]

Adi kuda cheddam aithe emundi

[@averagebadmin10player]

Cluster monitoring can't be done by Prometheus or grafana ?

[@AbhishekVeeramalla]

For example ?

[@averagebadmin10player]

@@AbhishekVeeramalla 6th point of this video you told Sysdig works like a deamon set if some hacker is attacking in that way can't be done by prometheus and grafana ?

[@DanielSmith-hd9iq]

do you mean docker snyk here?

[@AbhishekVeeramalla]

yes

[@udaykumar-tb5kn]

Bro. This security of kubernetes playliat or devops hero zero playlist confused with which playlist and what order should be flowed pls tell

[@AbhishekVeeramalla]

This video is not part of devops zero to hero. Please check again. This is only part of kubernetes playlist and if u want to learn kubernetes advanced u need to Learn this

[@udaykumar-tb5kn]

@@AbhishekVeeramalla understood bro thanks lot for detailed explanation